[Openswan Users] RSA + XAUTH + Cisco reconnection failures

[Avesh Agarwal]

On 03/04/2010 10:33 PM, Andrew Campbell wrote:
> One more thing I noted in the log file,
>
> Successful connection
> ---------------------
>
> Mar  5 14:25:12 openswan pluto[7806]: "vpn" #1: XAUTH: Answering XAUTH
> challenge with user='test3'
> Mar  5 14:25:12 openswan pluto[7806]: "vpn" #1: transition from state
> STATE_XAUTH_I0 to state STATE_XAUTH_I1
>
> Failed connection
> -----------------
>
> Mar  5 14:26:41 openswan pluto[7806]: "vpn" #3: received and ignored
> informational message
> Mar  5 14:26:41 openswan pluto[7806]: "vpn" #3: XAUTH: Unsupported
> attribute: 21??
>    
Not sure about your exact issue, but  I just looked at 
include/ietf_constants.h and found

CERT_TYPE_UNSUPPORTED =     21

Is there any cert type mismatch?

Why openswan reports "21" as unsupported attribute, that is another issue.

Avesh

> Mar  5 14:26:43 openswan pluto[7806]: "vpn" #3: XAUTH: Answering XAUTH
> challenge with user='\317\257nK@\251\373\267'
>
> Regards,
>
> Andrew Campbell
>
> ______________________________________________________________________
> The information contained in this e-mail (including any attachments)
> is confidential. It is only intended for the recipient/s named above.
> If you are not the intended or one of the intended recipient/s any
> unauthorised use is prohibited. If you have received this e-mail in
> error, please notify the sender and destroy all copies of this e-mail.
> Confidentiality and legal privilege are not waived or lost as a result
> of mistaken delivery.
>
> Opinions expressed in this e-mail are those of the sender and unless
> expressly stated are not necessarily the opinions of Madison
> Technologies Pty Ltd.
>
> This email has been scanned by the MessageLabs Email Security System.
> For more information please visit http://www.messagelabs.com/email
> ______________________________________________________________________
> _______________________________________________
> Users at openswan.org
> http://lists.openswan.org/mailman/listinfo/users
> Building and Integrating Virtual Private Networks with Openswan:
> http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155
>